CVE-2026-0233

CVE-2026-0233 is a certificate validation vulnerability affecting Palo Alto Networks Autonomous Digital Experience Manager on Windows systems. An unauthenticated attacker with adjacent network access can exploit this flaw to execute arbitrary code with NT AUTHORITY\SYSTEM privileges, granting them complete system control. The vulnerability requires only adjacent network proximity to exploit and does not demand prior authentication, representing a moderately accessible attack vector. However, the CVSS score is not currently available, though the FAUCET Risk Score of 32.0/100 suggests moderate risk concern. There is no evidence of active exploitation in the wild, as the vulnerability is not included on the KEV catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.00013 indicates minimal current exploitation probability relative to other disclosed vulnerabilities, suggesting limited immediate threat to organizations at this time.